Denial Of Service (DOS)

🗓️ 28 Sep 2022 19:58:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Consul vulnerability to authorization denial of service due to incorrectly validating JWT characters

Reporter	Title	Published	Views	Family All 46
AlpineLinux	CVE-2021-41803	23 Sep 202200:00	–	alpinelinux
Chainguard	CVE-2021-41803 vulnerabilities	23 Sep 202201:15	–	cgr
Circl	CVE-2021-41803	23 Sep 202207:12	–	circl
CNNVD	HashiCorp Consul 安全漏洞	23 Sep 202200:00	–	cnnvd
CVE	CVE-2021-41803	23 Sep 202200:00	–	cve
Cvelist	CVE-2021-41803	23 Sep 202200:00	–	cvelist
Debian CVE	CVE-2021-41803	23 Sep 202200:00	–	debiancve
EUVD	EUVD-2022-6841	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 38 Update: moby-engine-24.0.5-1.fc38	30 Aug 202301:37	–	fedora
Fedora	[SECURITY] Fedora 37 Update: moby-engine-24.0.5-1.fc37	5 Sep 202300:47	–	fedora

Vulners

Node

hashicorp consulMatch1.12.0-r1go

AND

hashicorp consulMatch1.12.0-r2go

AND

hashicorp consulMatch1.12.0-r4go

AND

hashicorp consulMatch1.12.0-r3go

AND

hashicorp consulMatch1.12.0-r0go

AND

alpinelinux alpine_linuxMatch3.16

hashicorp consulMatch1.13.1-r1go

AND

hashicorp consulMatch1.12.2-r0go

AND

hashicorp consulMatch1.11.2-r1go

AND

hashicorp consulMatch1.12.0-r1go

AND

hashicorp consulMatch1.7.3-r0go

AND

hashicorp consulMatch1.12.0-r0go

AND

hashicorp consulMatch1.12.3-r1go

AND

hashicorp consulMatch1.10.0-r0go

AND

hashicorp consulMatch1.9.5-r0go

AND

hashicorp consulMatch1.13.1-r0go

AND

hashicorp consulMatch1.9.3-r0go

AND

hashicorp consulMatch1.12.3-r0go

AND

hashicorp consulMatch1.11.4-r1go

AND

hashicorp consulMatch1.11.3-r0go

AND

hashicorp consulMatch1.11.1-r0go

AND

hashicorp consulMatch1.10.1-r0go

AND

hashicorp consulMatch1.12.3-r2go

AND

hashicorp consulMatch1.10.2-r0go

AND

hashicorp consulMatch1.10.3-r0go

AND

hashicorp consulMatch1.7.2-r0go

AND

hashicorp consulMatch1.10.4-r0go

AND

hashicorp consulMatch1.11.2-r0go

AND

hashicorp consulMatch1.10.2-r1go

AND

hashicorp consulMatch1.9.6-r0go

AND

hashicorp consulMatch1.9.5-r1go

AND

hashicorp consulMatch1.7.2-r1go

AND

hashicorp consulMatch1.9.4-r0go

AND

hashicorp consulMatch1.7.1-r1go

AND

hashicorp consulMatch1.11.0-r0go

AND

hashicorp consulMatch1.11.4-r0go

AND

alpinelinux alpine_linuxMatchedge

hashicorp github.com/hashicorp/consulRangev1.8.0-beta1–1.8.0-beta1go

hashicorp github.com/hashicorp/consulRangev1.12.0-beta1–1.12.0-beta1go

hashicorp github.com/hashicorp/consulRangev1.13.0-alpha1–1.13.0-alpha1go

Source	Link
discuss	www.discuss.hashicorp.com/t/hcsec-2022-19-consul-auto-config-jwt-authorization-missing-input-validation/44627
github	www.github.com/hashicorp/consul/pull/14580
github	www.github.com/hashicorp/consul/pull/14581
github	www.github.com/hashicorp/consul/pull/14582
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/

07 Nov 2023 22:06Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.17.1

EPSS0.00309